DynaPass Authentication Glossary


Posts Tagged ‘two factor authentication’

Two Factor Authentication Token

During the two-factor authentication process which utilizes “something you have,” the two-factor authentication token refers to a physical property such as a USB token or a smart card that a user has. A commonly used two factor authentication token is a USB token that a user can stick into a computer via the USB drive to authenticate themselves.  Two Factor authentication tokens can be useful for organizations that have employees who need to access company data stored in different forms such as websites and company applications where tokens can be easy and convenient to use instead of remembering multiple static passwords.

See DynaPass Two-Factor Authentication

Short Message Service (SMS)

Widely accepted across the world an SMS text message is a form of communication through a PC, phone or mobile device where a short text message can be delivered using standardized communication protocols. Short Message Services are also used during some multi-factor and two-factor authentication processes as an out-of-band authentication method known as “something you have”. Something you have refers to the device used to receive a one-time password transmission after traditional login.

See DynaPass Two-Factor Authentication

Out-of-Band Authentication

Authentication that requires utilizing a separate network for transmission of identification factors is considered out-of-band. An example would be during two-factor authentication when a user logs into an online banking account. When a bank account holder logs into the banks website from their home computer with traditional login credentials a one-time password may be delivered to their mobile phone through SMS text message. This mobile OTP is an out-of-band authentication solution because it utilizes the cellular phone company’s network for transmission as opposed to the network which established the connection.

See DynaPass Two-Factor Authentication

Biometric Authentication

Biometric authentication is when biological measurements, such as the distance between mapped out points on fingerprints or in the retina, are used as identifying factors while authenticating a user. During mutli and two-factor authentication processes biometrics could be considered the “something you are” factor. However the high cost associated with this type of authentication along with the nature of scanning makes it less desirable.

See DynaPass Two-Factor Authentication

Authentication Token

During multi-factor and two-factor authentication processes a device may be used for one time password generation or OTP transmission. Known as an authentication token and ranging from a proprietary device to a regular mobile phone these tokens are used for out-of-band authentication. Many times when discussing the cost of authentication security the token is mentioned due to the costs associated with hardware creation and network expenses. Downsides to tokens are that they can be misplaced, stolen or broken.

See DynaPass Two-Factor Authentication

Two Factor Authentication – Dual Factor Authentication (2FA)

Two Factor Authentication (TFA or 2FA) is also called strong authentication and is a security process which requires two independent mechanisms for authentication.  Two factor authentication implies the use of two out of the three factors to assert an entity’s identity to another entity. The three factors are: Something you know, like a Personal Identification Number (PIN); Something you have, like a mobile device for receiving a one time password or ATM card; Something you are, like a face scan, iris scan or your fingerprint.  Two factor authentication is used generally in electronic computer authentication where stronger means of authentication is needed to protect sensitive data.  For example, electronic personal health information (ePHI) on a computer accessed by many different individuals can be exposed and can result in HIPAA fines and violations for the medical institution.  Two factor authentication can be used in these instances to decrease the probability of a non authorized user to access this information.

See DynaPass Two-Factor Authentication

One-Time Password (OTP)

A one-time password (OTP) is a password that is only valid for one session or transaction. Unlike traditional static passwords, one-time passwords are not vulnerable to replay attacks. This means that if a potential intruder manages to record an OTP that was already used to log into a service or to conduct a transaction, he or she will not be able to use it again since the password is no longer valid. One-time password generations are random which make them hard to predict. There are different ways to make the user aware of an OTP. Some systems use electronic tokens that the user carries that generate a one-time password and show them using a small display. Other systems focus on software that run on a user’s mobile phone and there are systems that generate one-time passwords on the server side and then send them to the user using an out-of-band channel such as SMS messaging.

See DynaPass Two-Factor Authentication
See DynaPass One-time Password